Amwins Group, Inc.

The California Office of the Attorney General reported that Amwins Group, Inc. experienced a data breach on November 30, 2023, involving personal information potentially affecting 215 Rhode Island residents. The breach occurred due to unauthorized access to the MOVEit Transfer service used by its human resources vendor, Paycor.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-578587

TPRM report: https://www.rankiteo.com/company/amwins-group

"id": "amw154072525",
"linkid": "amwins-group",
"type": "Breach",
"date": "5/2023",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 215,
                        'name': 'Amwins Group, Inc.',
                        'type': 'Company'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'number_of_records_exposed': 215,
                 'type_of_data_compromised': 'Personal Information'},
 'date_detected': '2023-11-30',
 'description': 'The California Office of the Attorney General reported that '
                'Amwins Group, Inc. experienced a data breach on November 30, '
                '2023, involving personal information potentially affecting '
                '215 Rhode Island residents. The breach occurred due to '
                'unauthorized access to the MOVEit Transfer service used by '
                'its human resources vendor, Paycor.',
 'impact': {'data_compromised': 'Personal Information',
            'systems_affected': 'MOVEit Transfer service'},
 'references': [{'source': 'California Office of the Attorney General'}],
 'title': 'Amwins Group, Inc. Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'MOVEit Transfer service'}